Red Hat Security Advisory: freerdp security update
Multiple heap and global buffer overflow vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol client. These vulnerabilities are tracked as CVE-2026-22855, CVE-2026-22858, and CVE-2026-22859. Red Hat has issued a security advisory with an update for FreeRDP in Red Hat Enterprise Linux 9 to address these issues. The vulnerabilities are rated as important by Red Hat Product Security. The update includes fixes for these buffer overflow issues to prevent potential memory corruption.
AI Analysis
Technical Summary
FreeRDP, an open-source RDP client, contains three security vulnerabilities involving heap-buffer-overflow (CVE-2026-22855 and CVE-2026-22859) and global-buffer-overflow (CVE-2026-22858). These vulnerabilities could lead to memory corruption when processing certain inputs. Red Hat has released security updates for FreeRDP packages in Red Hat Enterprise Linux 9 and related CodeReady Linux Builder variants to fix these issues. The advisory references Red Hat Security Advisory RHSA-2026:3067 and provides updated package versions (freerdp-2.11.7-1.el9_7.2) that include the fixes.
Potential Impact
The identified buffer overflow vulnerabilities in FreeRDP could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution if exploited. Red Hat rates the security impact as Important. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated FreeRDP packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 9 and related CodeReady Linux Builder products should apply the security update freerdp-2.11.7-1.el9_7.2 or later as provided in RHSA-2026:3067. Detailed update instructions are available at https://access.redhat.com/articles/11258. Applying this official update fully mitigates the vulnerabilities.
Red Hat Security Advisory: freerdp security update
Description
Multiple heap and global buffer overflow vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol client. These vulnerabilities are tracked as CVE-2026-22855, CVE-2026-22858, and CVE-2026-22859. Red Hat has issued a security advisory with an update for FreeRDP in Red Hat Enterprise Linux 9 to address these issues. The vulnerabilities are rated as important by Red Hat Product Security. The update includes fixes for these buffer overflow issues to prevent potential memory corruption.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
FreeRDP, an open-source RDP client, contains three security vulnerabilities involving heap-buffer-overflow (CVE-2026-22855 and CVE-2026-22859) and global-buffer-overflow (CVE-2026-22858). These vulnerabilities could lead to memory corruption when processing certain inputs. Red Hat has released security updates for FreeRDP packages in Red Hat Enterprise Linux 9 and related CodeReady Linux Builder variants to fix these issues. The advisory references Red Hat Security Advisory RHSA-2026:3067 and provides updated package versions (freerdp-2.11.7-1.el9_7.2) that include the fixes.
Potential Impact
The identified buffer overflow vulnerabilities in FreeRDP could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution if exploited. Red Hat rates the security impact as Important. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated FreeRDP packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 9 and related CodeReady Linux Builder products should apply the security update freerdp-2.11.7-1.el9_7.2 or later as provided in RHSA-2026:3067. Detailed update instructions are available at https://access.redhat.com/articles/11258. Applying this official update fully mitigates the vulnerabilities.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:3067
- Cve Count
- 3
- Additional Cves
- ["CVE-2026-22858","CVE-2026-22859"]
Threat ID: 6a27e9938dd33fbd8516a7ee
Added to database: 06/09/2026, 10:23:15 UTC
Last enriched: 08/18/2026, 14:01:36 UTC
Last updated: 09/14/2026, 22:01:32 UTC
Views: 98
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.